Turn off cgit? [LWN.net]

Turn off cgit?

Posted Aug 29, 2026 12:25 UTC (Sat) by smurf (subscriber, #17840)
Parent article: Ryabitsev: Creepy crawlies

This is getting beyond ridiculous.

I'd just pop up a message "here's how to generate this page on your own machine, in three easy steps" and toss the whole cgit thing as unsustainable (at least until the world wakes up and plugs a BadUSB stick into every insecure TV.)

I replaced my own cgit instance with this, except mine is worded a lot less politely than I'd advocate for kernel.org.

to post comments

Turn off cgit?

Posted Aug 29, 2026 13:58 UTC (Sat) by joey (guest, #328) [Link] (1 responses)

Yeah looking that way.

I am getting 6 million hits/day to my own cgit, and it's hosting a lot less code than git.kernel.org

Turn off cgit?

Posted Aug 29, 2026 14:49 UTC (Sat) by mb (subscriber, #50428) [Link]

There are still workable options other than disabling it, like a trivial password barrier or putting it behind a cookie that would be acquired via the normal path humans typically take. These things do still work and crawlers have not yet tried to circumvent them, as far as I can see. It effectively turns an expensive CGI call into a static error page delivery, which is much less compute intensive. And if humans hit the protection, it's obvious and easy for them what to do. Of course, I realize that this barrier will also eventually be torn down, if enough people start to use it. And then the only solution left is to put it behind a real auth barrier or shut it off.